Privacy policy
Quire keeps your email address, hashes of your API keys and a monthly count of renders. The data you send to render and the PDFs it produces are never stored.
Last updated: 4 October 2026.
What we collect
- Your email address, to sign you in and to contact you about your account.
- API keys, stored only as SHA-256 hashes, with a short prefix, the name you or the CLI gave them, and when they were created and last used.
- Sign-in records: the email address, the device label sent by the CLI (for example "quirepdf-cli on laptop"), the time, and the number of wrong codes entered. They are used to complete and protect sign-in.
- Usage: the number of successful renders per account per calendar month, for quotas and billing.
- Plan and billing references: your plan and, once paid plans are available, the customer and subscription ids from our payment provider. We never see or store card details.
- IP addresses, held briefly in memory to apply rate limits. They are not written to our database.
What we don't collect
The JSON you send to render or validate, and the PDFs and PNGs Quire produces, are processed in memory and returned in the response. We don't write them to disk, log them or keep copies. The website uses no cookies, analytics or tracking scripts.
Who processes data for us
- Fly.io hosts the API and its database (United States).
- Cloudflare serves this website and our DNS.
- Resend delivers sign-in emails.
- Dodo Payments will handle payments as merchant of record once paid plans open. It processes your payment details and billing address under its own privacy policy.
These providers may keep short-lived operational logs, such as network logs, under their own policies. We don't sell or share your data with anyone else.
How long we keep it
Account data is kept while your account exists. Unused sign-in records expire after 15 minutes, and a new key waiting for the CLI to collect it is cleared after 30 minutes. When you ask us to delete your account, we delete your email address, keys and usage within 30 days, except records we must keep for tax or legal reasons.
Your choices
You can ask for a copy of your data, a correction, or deletion of your account by writing to [email protected] from the address on the account. You can revoke API keys at any time with npx quirepdf-cli keys revoke.
Changes
If this policy changes in a way that matters, we'll update the date above and, for significant changes, email account holders.
Contact
Questions about privacy: [email protected].